BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Invesalius3 - Remote Code Execution
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Aurba 501 - Authenticated RCE
- [webapps] HughesNet HT2000W Satellite Modem - Password Reset
North Korean Hackers Leverage Malicious NPM Packages for Initial Access
/in General NewsNorth Korean hackers, identified as Moonstone Sleet, have been distributing malicious JavaScript packages on the npm registry to infect Windows systems. The two packages, harthat-api and harthat-hash, were uploaded on July 7, 2024.
Cyware News – Latest Cyber News – Read More
The Role of AI in Cybersecurity Operations
/in General NewsAI can analyze data quickly, detect patterns of malicious behavior, and automate routine tasks like alert triaging and log analysis. However, human oversight is still necessary to ensure the accuracy and relevance of AI-generated insights.
Cyware News – Latest Cyber News – Read More
New Go-based Backdoor GoGra Targets South Asian Media Organization
/in General NewsAn unnamed media organization in South Asia was targeted in November 20233 using a previously undocumented Go-based backdoor called GoGra.
“GoGra is written in Go and uses the Microsoft Graph API to interact with a command-and-control (C&C) server hosted on Microsoft mail services,” Symantec, part of Broadcom, said in a report shared with The Hacker News.
It’s currently not clear how it’s
The Hacker News – Read More
Dark Reading News Desk Live From Black Hat USA 2024
/in General NewsThe Dark Reading team once again welcomes the world’s top cybersecurity experts to the Dark Reading News Desk live from Black Hat USA 2024. Tune into the livestream.
darkreading – Read More
The Prevalence of DarkComet in Dynamic DNS
/in General NewsA recent analysis using HYAS Insight threat intelligence revealed a trend in dynamic DNS registrations originating from Turkey in 2024, with DarkComet malware representing over 50% of the malicious domains identified.
Cyware News – Latest Cyber News – Read More
CrowdStrike Reveals Root Cause of Global System Outages
/in General NewsCybersecurity company CrowdStrike has published its root cause analysis detailing the Falcon Sensor software update crash that crippled millions of Windows devices globally.
The “Channel File 291” incident, as originally highlighted in its Preliminary Post Incident Review (PIR), has been traced back to a content validation issue that arose after it introduced a new Template Type to enable
The Hacker News – Read More
Replacement for Action Fraud, UK’s Cybercrime Reporting Service, Delayed Again Until 2025
/in General NewsThe new service, known as the Fraud and Cyber Crime Reporting and Analysis System (FCCRAS), will enhance the reporting process by allowing users to upload additional information like metadata, screenshots, and images.
Cyware News – Latest Cyber News – Read More
Florida Firm Sued Over Theft of 2.9B Personal Records
/in General NewsA class-action lawsuit is brewing over the cyber-heist of 2.9 billion personal records that were stolen from a Florida data broker, Jerico Pictures, doing business as National Public Data, and sold on the dark web.
Cyware News – Latest Cyber News – Read More
CISA Adds Microsoft COM for Windows Bug to its Known Exploited Vulnerabilities Catalog
/in General NewsThe vulnerability, tracked as CVE-2018-0824, arises from the deserialization of untrusted data. Microsoft warns that this flaw could lead to remote code execution if exploited by a specially crafted file or script.
Cyware News – Latest Cyber News – Read More
Police Recover Over $40m Headed to BEC Scammers
/in General NewsA Singaporean commodity firm has had a narrow escape after police managed to intervene to recover nearly all of the $42.3m lost to fraudsters in a business email compromise (BEC) scam.
Cyware News – Latest Cyber News – Read More